playwright-e2e-mcp 0.1.1 → 0.1.2

package/dist/utils/path-utils.d.ts

@@ -1,11 +1,12 @@
 /**
  * Cross-platform path handling.
  *
- * All path logic here is *lexical* (string based, no fs access) so that
+ * Most path logic here is *lexical* (string based, no fs access) so that
  * Windows paths behave correctly when unit tests run on macOS/Linux and
  * vice versa. Backslashes are normalized everywhere, drive letters and
  * UNC prefixes are preserved, and user-supplied paths are sandboxed to
  * the project root to block "../../etc/passwd" style escapes.
+ * realPathLenient / assertRealPathInside add the symlink-aware check.
  */
 /** Replace backslashes with slashes, collapsing duplicate separators. */
 export declare function normalizeSeparators(p: string): string;
@@ -25,6 +26,8 @@ export declare function resolvePath(base: string, target: string): string;
 export declare function isPathInside(child: string, parent: string): boolean;
 /** Expand a leading `~` to the user's home directory. */
 export declare function expandHome(p: string): string;
+/** True when any segment of `p` starts with '-' (it could be parsed as a CLI option). */
+export declare function hasOptionLikeSegment(p: string): boolean;
 /**
  * Sandbox a user-supplied path to the project root.
  *
@@ -49,7 +52,26 @@ export declare function tempFilePath(prefix: string, extension?: string): string
 /** True when a filename looks like a Playwright test/spec file. */
 export declare function isTestFile(p: string): boolean;
 /**
- * Validate a free-form CLI argument list: rejects NUL bytes and
- * shell-looking metacharacters that could smuggle extra commands.
+ * Validate one extra Playwright CLI argument: only flags from
+ * ALLOWED_CLI_FLAGS get through, in `--flag` or `--flag=value` form, and
+ * each value must pass that flag's check.
  */
 export declare function sanitizeCliArg(arg: string): string;
+/**
+ * Symlink-resolved form of `p`. When `p` does not exist yet (a file about
+ * to be written), its nearest existing ancestor is resolved and the
+ * missing tail re-appended, so a symlinked parent directory is still seen.
+ */
+export declare function realPathLenient(p: string): Promise<string>;
+/**
+ * Write `data` to `target` inside `root` without following a symlink at
+ * the final path component (a planted link, even a dangling one, could
+ * otherwise redirect the write outside the root). Parent directories are
+ * created and re-checked against the root after creation.
+ */
+export declare function writeFileInsideRoot(target: string, data: string | Uint8Array, root: string): Promise<void>;
+/**
+ * Filesystem-aware companion to sanitizeUserPath: throws INVALID_PATH when
+ * `target`, after resolving symlinks, is not inside `root` (also resolved).
+ */
+export declare function assertRealPathInside(target: string, root: string): Promise<void>;

package/dist/utils/path-utils.js

@@ -1,13 +1,16 @@
 /**
  * Cross-platform path handling.
  *
- * All path logic here is *lexical* (string based, no fs access) so that
+ * Most path logic here is *lexical* (string based, no fs access) so that
  * Windows paths behave correctly when unit tests run on macOS/Linux and
  * vice versa. Backslashes are normalized everywhere, drive letters and
  * UNC prefixes are preserved, and user-supplied paths are sandboxed to
  * the project root to block "../../etc/passwd" style escapes.
+ * realPathLenient / assertRealPathInside add the symlink-aware check.
  */
 import { randomBytes } from 'node:crypto';
+import { constants as fsConstants } from 'node:fs';
+import { lstat, mkdir, open, realpath } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { PlaywrightMcpError } from '../types/index.js';
@@ -113,6 +116,12 @@ export function expandHome(p) {
     }
     return p;
 }
+/** True when any segment of `p` starts with '-' (it could be parsed as a CLI option). */
+export function hasOptionLikeSegment(p) {
+    return normalizeSeparators(p)
+        .split('/')
+        .some((segment) => segment.startsWith('-'));
+}
 /**
  * Sandbox a user-supplied path to the project root.
  *
@@ -153,10 +162,16 @@ export function sanitizeUserPath(input, projectRoot) {
     const resolved = resolvePath(root, expanded);
     if (!isPathInside(resolved, root)) {
         throw new PlaywrightMcpError(`Path "${raw}" resolves outside the project root`, 'INVALID_PATH', {
-            hint: `Only paths inside ${root} are allowed. Directory traversal (..), absolute paths outside the project, and symlinks out of the project are rejected.`,
+            hint: `Only paths inside ${root} are allowed. Directory traversal (..) and absolute paths outside the project are rejected.`,
             details: `resolved=${resolved}`,
         });
     }
+    // Checked below the root only, so a root that itself has such a segment still works.
+    if (hasOptionLikeSegment(relativeToRoot(root, resolved))) {
+        throw new PlaywrightMcpError(`Path "${raw}" has a segment starting with "-"`, 'INVALID_PATH', {
+            hint: 'Path segments may not start with "-": the path could be read as a command-line option.',
+        });
+    }
     return resolved;
 }
 /** Convert a normalized path to the host platform's native form. */
@@ -192,20 +207,157 @@ export function tempFilePath(prefix, extension = '.json') {
 export function isTestFile(p) {
     return TEST_FILE_RE.test(normalizeSeparators(p));
 }
+const intIn = (min, max) => (value) => /^\d+$/.test(value) && Number(value) >= min && Number(value) <= max;
+const oneOf = (...values) => (value) => values.includes(value);
+/** No leading '-' (would be read as another option), no control characters. */
+const plainText = (value) => value !== '' && !value.startsWith('-') && !/[\x00-\x1f\x7f]/.test(value);
+/**
+ * Playwright CLI flags callers may pass through `args`, each with the only
+ * values it accepts. Anything that points Playwright at another file or
+ * directory (--config, --output, --tsconfig, --reporter…), blocks the run
+ * (--ui, --debug) or hands a value to another program unchecked is absent.
+ * Value-taking flags must use `--flag=value`, so a bare flag can never
+ * swallow the arguments appended after it.
+ */
+const ALLOWED_CLI_FLAGS = new Map([
+    ['--headed', null],
+    ['-x', null],
+    ['--fail-on-flaky-tests', null],
+    ['--forbid-only', null],
+    ['--fully-parallel', null],
+    ['--pass-with-no-tests', null],
+    ['--quiet', null],
+    ['--ignore-snapshots', null],
+    ['--no-deps', null],
+    ['--list', null],
+    ['--project', { test: (v) => plainText(v) && /^[\w .@:+/-]+$/.test(v), describe: 'a project name' }],
+    ['--repeat-each', { test: intIn(1, 100), describe: 'an integer 1-100' }],
+    ['--max-failures', { test: intIn(0, 1000), describe: 'an integer 0-1000' }],
+    ['--global-timeout', { test: intIn(0, 3_600_000), describe: 'milliseconds, at most 3600000' }],
+    ['--timeout', { test: intIn(0, 3_600_000), describe: 'milliseconds, at most 3600000' }],
+    ['--retries', { test: intIn(0, 10), describe: 'an integer 0-10' }],
+    ['--workers', { test: (v) => intIn(1, 64)(v) || /^([1-9]\d?|100)%$/.test(v), describe: '1-64 or a percentage' }],
+    ['-j', { test: (v) => intIn(1, 64)(v) || /^([1-9]\d?|100)%$/.test(v), describe: '1-64 or a percentage' }],
+    ['--shard', { test: (v) => /^[1-9]\d{0,3}\/[1-9]\d{0,3}$/.test(v), describe: 'current/total, e.g. 1/3' }],
+    ['--grep-invert', { test: plainText, describe: 'a pattern not starting with "-"' }],
+    [
+        '--trace',
+        {
+            test: oneOf('on', 'off', 'on-first-retry', 'on-all-retries', 'retain-on-failure', 'retain-on-first-failure', 'retain-on-failure-and-retries'),
+            describe: 'a Playwright trace mode',
+        },
+    ],
+    ['--update-snapshots', { optional: true, test: oneOf('all', 'changed', 'missing', 'none'), describe: 'all, changed, missing or none' }],
+    ['-u', { optional: true, test: oneOf('all', 'changed', 'missing', 'none'), describe: 'all, changed, missing or none' }],
+    // The value is handed to `git diff`, so it must be a plain ref, never an option.
+    [
+        '--only-changed',
+        { optional: true, test: (v) => /^[A-Za-z0-9._/~^@{}][A-Za-z0-9._/~^@{}-]*$/.test(v) && v.length <= 200, describe: 'a git ref' },
+    ],
+]);
 /**
- * Validate a free-form CLI argument list: rejects NUL bytes and
- * shell-looking metacharacters that could smuggle extra commands.
+ * Validate one extra Playwright CLI argument: only flags from
+ * ALLOWED_CLI_FLAGS get through, in `--flag` or `--flag=value` form, and
+ * each value must pass that flag's check.
  */
 export function sanitizeCliArg(arg) {
     const raw = typeof arg === 'string' ? arg.trim() : '';
     if (raw === '') {
         throw new PlaywrightMcpError('Argument must not be empty', 'INVALID_PATH');
     }
-    if (/[\0;&|><`$]/.test(raw)) {
-        throw new PlaywrightMcpError(`Argument "${raw}" contains forbidden shell characters`, 'INVALID_PATH', {
-            hint: 'Arguments are executed directly (no shell); remove ; & | > < ` $ characters.',
+    if (/[\0;&|><`$]/.test(raw) || /[\x00-\x1f\x7f]/.test(raw)) {
+        throw new PlaywrightMcpError(`Argument "${raw}" contains forbidden characters`, 'INVALID_PATH', {
+            hint: 'Arguments are executed directly (no shell); remove control characters and ; & | > < ` $.',
+        });
+    }
+    const eq = raw.indexOf('=');
+    const flag = eq === -1 ? raw : raw.slice(0, eq);
+    const value = eq === -1 ? undefined : raw.slice(eq + 1);
+    if (!ALLOWED_CLI_FLAGS.has(flag)) {
+        throw new PlaywrightMcpError(`Argument "${raw}" is not an allowed Playwright flag`, 'INVALID_PATH', {
+            hint: `Allowed flags: ${[...ALLOWED_CLI_FLAGS.keys()].join(', ')}. Pass test files via testFiles and the config via config.`,
+        });
+    }
+    const check = ALLOWED_CLI_FLAGS.get(flag) ?? null;
+    if (check === null) {
+        if (value !== undefined) {
+            throw new PlaywrightMcpError(`Flag "${flag}" does not take a value`, 'INVALID_PATH');
+        }
+        return raw;
+    }
+    if (value === undefined) {
+        if (check.optional)
+            return raw;
+        throw new PlaywrightMcpError(`Flag "${flag}" needs a value: use ${flag}=<value>`, 'INVALID_PATH', {
+            hint: `${flag} takes ${check.describe}.`,
+        });
+    }
+    if (!check.test(value)) {
+        throw new PlaywrightMcpError(`Invalid value for ${flag}: "${value}"`, 'INVALID_PATH', {
+            hint: `${flag} takes ${check.describe}.`,
         });
     }
     return raw;
 }
+/**
+ * Symlink-resolved form of `p`. When `p` does not exist yet (a file about
+ * to be written), its nearest existing ancestor is resolved and the
+ * missing tail re-appended, so a symlinked parent directory is still seen.
+ */
+export async function realPathLenient(p) {
+    const normalized = normalizePath(p);
+    const tail = [];
+    let current = normalized;
+    for (;;) {
+        try {
+            const real = normalizePath(await realpath(toNativePath(current)));
+            return tail.length === 0 ? real : normalizePath(`${real}/${tail.reverse().join('/')}`);
+        }
+        catch {
+            const parent = normalizePath(path.posix.dirname(current));
+            if (parent === current || parent === '' || parent === '.')
+                return normalized;
+            tail.push(path.posix.basename(current));
+            current = parent;
+        }
+    }
+}
+/**
+ * Write `data` to `target` inside `root` without following a symlink at
+ * the final path component (a planted link, even a dangling one, could
+ * otherwise redirect the write outside the root). Parent directories are
+ * created and re-checked against the root after creation.
+ */
+export async function writeFileInsideRoot(target, data, root) {
+    const native = toNativePath(target);
+    const info = await lstat(native).catch(() => null);
+    if (info?.isSymbolicLink()) {
+        throw new PlaywrightMcpError(`Refusing to write through a symlink: ${normalizePath(target)}`, 'INVALID_PATH', {
+            hint: 'Replace the symlink with a regular file or pick another path.',
+        });
+    }
+    await mkdir(path.dirname(native), { recursive: true });
+    await assertRealPathInside(path.posix.dirname(normalizePath(target)), root);
+    // O_NOFOLLOW closes the gap between the lstat above and the open (POSIX only).
+    const flags = fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_TRUNC | (fsConstants.O_NOFOLLOW ?? 0);
+    const handle = await open(native, flags, 0o644);
+    try {
+        await handle.writeFile(data);
+    }
+    finally {
+        await handle.close();
+    }
+}
+/**
+ * Filesystem-aware companion to sanitizeUserPath: throws INVALID_PATH when
+ * `target`, after resolving symlinks, is not inside `root` (also resolved).
+ */
+export async function assertRealPathInside(target, root) {
+    const [realTarget, realRoot] = await Promise.all([realPathLenient(target), realPathLenient(root)]);
+    if (!isPathInside(realTarget, realRoot)) {
+        throw new PlaywrightMcpError(`Path "${normalizePath(target)}" resolves outside the project root`, 'INVALID_PATH', {
+            hint: `A symlink points outside ${normalizePath(root)}. Only paths inside the project root are allowed.`,
+        });
+    }
+}
 //# sourceMappingURL=path-utils.js.map

package/dist/utils/path-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"path-utils.js","sourceRoot":"","sources":["../../src/utils/path-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,QAAQ,GAAG,cAAc,CAAC;AAChC,yEAAyE;AACzE,MAAM,MAAM,GAAG,+BAA+B,CAAC;AAE/C,MAAM,YAAY,GAAG,kDAAkD,CAAC;AAExE,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,SAAS,EAAE,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAEjC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;QAC9B,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC;QACX,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACvB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc;IACtD,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,cAAc,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC9D,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,cAAc,KAAK,EAAE;QAAE,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACvE,OAAO,aAAa,CAAC,GAAG,cAAc,IAAI,gBAAgB,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc;IACxD,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC;IAChD,OAAO,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,WAAmB;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,cAAc,EAAE;YACpE,IAAI,EAAE,uEAAuE;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,EAAE,cAAc,EAAE;YACrE,IAAI,EAAE,uEAAuE;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,cAAc,EAAE;YACxE,IAAI,EAAE,kCAAkC;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kBAAkB,CAAC,IAAI,GAAG,2CAA2C,EAAE,cAAc,EAAE;YAC/F,IAAI,EAAE,iDAAiD;SACxD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,WAAW,GAAG,EAAE,cAAc,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7C,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAAC,SAAS,GAAG,qCAAqC,EAAE,cAAc,EAAE;YAC9F,IAAI,EAAE,qBAAqB,IAAI,2HAA2H;YAC1J,OAAO,EAAE,YAAY,QAAQ,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AAC5G,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,CAAS;IACpD,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAG,QAAkB;IACjE,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,SAAS,GAAG,OAAO;IAC9D,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9E,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,CAAC,aAAa,GAAG,uCAAuC,EAAE,cAAc,EAAE;YACpG,IAAI,EAAE,8EAA8E;SACrF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"path-utils.js","sourceRoot":"","sources":["../../src/utils/path-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,QAAQ,GAAG,cAAc,CAAC;AAChC,yEAAyE;AACzE,MAAM,MAAM,GAAG,+BAA+B,CAAC;AAE/C,MAAM,YAAY,GAAG,kDAAkD,CAAC;AAExE,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,SAAS,EAAE,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAEjC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;QAC9B,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC;QACX,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACvB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc;IACtD,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,cAAc,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC9D,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,cAAc,KAAK,EAAE;QAAE,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACvE,OAAO,aAAa,CAAC,GAAG,cAAc,IAAI,gBAAgB,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc;IACxD,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC;IAChD,OAAO,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,OAAO,mBAAmB,CAAC,CAAC,CAAC;SAC1B,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,WAAmB;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,cAAc,EAAE;YACpE,IAAI,EAAE,uEAAuE;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,EAAE,cAAc,EAAE;YACrE,IAAI,EAAE,uEAAuE;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,cAAc,EAAE;YACxE,IAAI,EAAE,kCAAkC;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kBAAkB,CAAC,IAAI,GAAG,2CAA2C,EAAE,cAAc,EAAE;YAC/F,IAAI,EAAE,iDAAiD;SACxD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,WAAW,GAAG,EAAE,cAAc,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7C,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAAC,SAAS,GAAG,qCAAqC,EAAE,cAAc,EAAE;YAC9F,IAAI,EAAE,qBAAqB,IAAI,6FAA6F;YAC5H,OAAO,EAAE,YAAY,QAAQ,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IACD,qFAAqF;IACrF,IAAI,oBAAoB,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,kBAAkB,CAAC,SAAS,GAAG,mCAAmC,EAAE,cAAc,EAAE;YAC5F,IAAI,EAAE,wFAAwF;SAC/F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AAC5G,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,CAAS;IACpD,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAG,QAAkB;IACjE,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,SAAS,GAAG,OAAO;IAC9D,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9E,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAKD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE,CAC5D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;AACtE,MAAM,KAAK,GAAG,CAAC,GAAG,MAAgB,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjF,+EAA+E;AAC/E,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE9G;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAyB;IACxD,CAAC,UAAU,EAAE,IAAI,CAAC;IAClB,CAAC,IAAI,EAAE,IAAI,CAAC;IACZ,CAAC,uBAAuB,EAAE,IAAI,CAAC;IAC/B,CAAC,eAAe,EAAE,IAAI,CAAC;IACvB,CAAC,kBAAkB,EAAE,IAAI,CAAC;IAC1B,CAAC,sBAAsB,EAAE,IAAI,CAAC;IAC9B,CAAC,SAAS,EAAE,IAAI,CAAC;IACjB,CAAC,oBAAoB,EAAE,IAAI,CAAC;IAC5B,CAAC,WAAW,EAAE,IAAI,CAAC;IACnB,CAAC,QAAQ,EAAE,IAAI,CAAC;IAChB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACpG,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IACxE,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAC3E,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,CAAC;IAC9F,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,CAAC;IACvF,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAClE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IAChH,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACzG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IACzG,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,iCAAiC,EAAE,CAAC;IACnF;QACE,SAAS;QACT;YACE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,+BAA+B,CAAC;YAC7I,QAAQ,EAAE,yBAAyB;SACpC;KACF;IACD,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,CAAC;IACvI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,CAAC;IACvH,iFAAiF;IACjF;QACE,gBAAgB;QAChB,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE;KAChI;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,kBAAkB,CAAC,aAAa,GAAG,iCAAiC,EAAE,cAAc,EAAE;YAC9F,IAAI,EAAE,0FAA0F;SACjG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,kBAAkB,CAAC,aAAa,GAAG,qCAAqC,EAAE,cAAc,EAAE;YAClG,IAAI,EAAE,kBAAkB,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4DAA4D;SAC7H,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,kBAAkB,CAAC,SAAS,IAAI,yBAAyB,EAAE,cAAc,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAAC,SAAS,IAAI,wBAAwB,IAAI,UAAU,EAAE,cAAc,EAAE;YAChG,IAAI,EAAE,GAAG,IAAI,UAAU,KAAK,CAAC,QAAQ,GAAG;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,IAAI,MAAM,KAAK,GAAG,EAAE,cAAc,EAAE;YACpF,IAAI,EAAE,GAAG,IAAI,UAAU,KAAK,CAAC,QAAQ,GAAG;SACzC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAS;IAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1D,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,UAAU,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,IAAyB,EAAE,IAAY;IAC/F,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE;YAC5G,IAAI,EAAE,+DAA+D;SACtE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5E,+EAA+E;IAC/E,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAY;IACrE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,kBAAkB,CAAC,SAAS,aAAa,CAAC,MAAM,CAAC,qCAAqC,EAAE,cAAc,EAAE;YAChH,IAAI,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,mDAAmD;SACzG,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/utils/playwright-runner.d.ts

@@ -37,6 +37,20 @@ export interface ProcessOutcome {
  * Children are tracked so shutdown/disconnect can never orphan them.
  */
 export declare function runProcess(command: string, args: string[], options: RunProcessOptions): Promise<ProcessOutcome>;
+/**
+ * Cap how many children may run at once; 0 means no cap. The HTTP bridge
+ * sets one (PW_MCP_MAX_CHILDREN, default 4) so remote callers cannot
+ * start an unbounded number of browsers and test runs.
+ */
+export declare function setMaxChildren(limit: number): void;
+/**
+ * When on (the HTTP bridge turns it on), children get only an allowlisted
+ * environment, so code run on behalf of a remote caller cannot read
+ * deployment credentials.
+ */
+export declare function setScrubChildEnv(enabled: boolean): void;
+/** Environment for a spawned child: process.env plus overrides, allowlisted when scrubbing. */
+export declare function childEnv(overrides?: Record<string, string>): NodeJS.ProcessEnv;
 /**
  * Force-kill every child still running (and its tree). Called on
  * shutdown and when the MCP client disconnects so no browser or test
@@ -51,13 +65,3 @@ export declare function killActiveChildren(): number;
 export declare function runTests(options: RunTestOptions): Promise<RunTestResult>;
 /** List tests via `playwright test --list`, falling back to file scan. */
 export declare function listTests(options: ListTestsOptions): Promise<ListTestsResult>;
-export interface ServerProbe {
-    reachable: boolean;
-    status?: number;
-    error?: string;
-}
-/**
- * Quick reachability check for the app under test, used to tell the
- * user "start your dev server" instead of surfacing ECONNREFUSED.
- */
-export declare function probeServer(url: string, timeoutMs?: number): Promise<ServerProbe>;

package/dist/utils/playwright-runner.js

@@ -14,7 +14,7 @@ import path from 'node:path';
 import { PlaywrightMcpError } from '../types/index.js';
 import { findTestFiles, missingPlaywrightMessage, detectProject, } from './project-detector.js';
 import { extractJsonFromText, extractTestTitles, diagnoseOutput, parseReportJson, parseProjectNames, } from './report-parser.js';
-import { isAbsolutePath, isPathInside, normalizePath, relativeToRoot, sanitizeCliArg, tempFilePath, toNativePath, } from './path-utils.js';
+import { hasOptionLikeSegment, isAbsolutePath, isPathInside, normalizePath, relativeToRoot, sanitizeCliArg, tempFilePath, toNativePath, } from './path-utils.js';
 import { logger } from './logger.js';
 const DEFAULT_RUN_TIMEOUT_MS = 120_000;
 const DEFAULT_LIST_TIMEOUT_MS = 60_000;
@@ -145,6 +145,21 @@ export function runProcess(command, args, options) {
                 chunks.shift();
             }
         };
+        if (maxChildren > 0 && activeChildren.size >= maxChildren) {
+            resolve({
+                code: null,
+                signalName: null,
+                stdout: '',
+                stderr: '',
+                timedOut: false,
+                aborted: false,
+                spawnError: {
+                    code: 'EBUSY',
+                    message: `Too many runs in progress (limit ${maxChildren}). Try again when one finishes.`,
+                },
+            });
+            return;
+        }
         let child;
         try {
             child = spawn(command, args, {
@@ -238,6 +253,86 @@ export function runProcess(command, args, options) {
 }
 /** Every child spawned by runProcess that has not settled yet. */
 const activeChildren = new Set();
+let maxChildren = 0;
+/**
+ * Cap how many children may run at once; 0 means no cap. The HTTP bridge
+ * sets one (PW_MCP_MAX_CHILDREN, default 4) so remote callers cannot
+ * start an unbounded number of browsers and test runs.
+ */
+export function setMaxChildren(limit) {
+    maxChildren = Number.isFinite(limit) && limit > 0 ? Math.floor(limit) : 0;
+}
+let scrubChildEnv = false;
+/**
+ * When on (the HTTP bridge turns it on), children get only an allowlisted
+ * environment, so code run on behalf of a remote caller cannot read
+ * deployment credentials.
+ */
+export function setScrubChildEnv(enabled) {
+    scrubChildEnv = enabled;
+}
+/** Variables a child keeps in scrubbed mode (compared upper-case). */
+const CHILD_ENV_ALLOW = new Set([
+    'PATH',
+    'PATHEXT',
+    'HOME',
+    'USERPROFILE',
+    'TMPDIR',
+    'TEMP',
+    'TMP',
+    'LANG',
+    'LANGUAGE',
+    'TZ',
+    'CI',
+    'SYSTEMROOT',
+    'SYSTEMDRIVE',
+    'WINDIR',
+    'COMSPEC',
+    'APPDATA',
+    'LOCALAPPDATA',
+    'PROGRAMDATA',
+    'PROGRAMFILES',
+    'PROGRAMFILES(X86)',
+    'XDG_CACHE_HOME',
+    'XDG_CONFIG_HOME',
+    'XDG_RUNTIME_DIR',
+    'DISPLAY',
+]);
+const CHILD_ENV_ALLOW_PREFIXES = ['LC_', 'NPM_CONFIG_', 'PLAYWRIGHT_'];
+/** Even allowlisted names are dropped when they look like a secret. */
+const SECRET_ENV_RE = /(TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL|PRIVATE|API_?KEY|ACCESS_?KEY|AUTH|SESSION|COOKIE|DATABASE_URL|_DSN$)/i;
+/** Names listed in PW_MCP_PASSTHROUGH_ENV (comma-separated), never the bridge token. */
+function passthroughNames() {
+    return new Set((process.env.PW_MCP_PASSTHROUGH_ENV ?? '')
+        .split(',')
+        .map((name) => name.trim().toUpperCase())
+        .filter((name) => name && name !== 'PW_MCP_HTTP_TOKEN'));
+}
+/** A URL with userinfo (`scheme://user:pass@host`), e.g. an authenticated proxy. */
+const URL_CREDENTIALS_RE = /:\/\/[^/\s@]*@/;
+function keepInScrubbedEnv(key, value, passthrough) {
+    const upper = key.toUpperCase();
+    if (upper === 'PW_MCP_HTTP_TOKEN')
+        return false;
+    if (passthrough.has(upper))
+        return true;
+    if (SECRET_ENV_RE.test(key))
+        return false;
+    if (value !== undefined && URL_CREDENTIALS_RE.test(value))
+        return false;
+    return CHILD_ENV_ALLOW.has(upper) || CHILD_ENV_ALLOW_PREFIXES.some((prefix) => upper.startsWith(prefix));
+}
+/** Environment for a spawned child: process.env plus overrides, allowlisted when scrubbing. */
+export function childEnv(overrides = {}) {
+    const env = {};
+    const passthrough = scrubChildEnv ? passthroughNames() : new Set();
+    for (const [key, value] of Object.entries(process.env)) {
+        if (scrubChildEnv && !keepInScrubbedEnv(key, value, passthrough))
+            continue;
+        env[key] = value;
+    }
+    return { ...env, ...overrides };
+}
 /**
  * Force-kill every child still running (and its tree). Called on
  * shutdown and when the MCP client disconnects so no browser or test
@@ -260,6 +355,13 @@ function sanitizeTestFile(file, root) {
             hint: `Only test paths inside ${root} are allowed.`,
         });
     }
+    // Test files go on the command line as positionals; a segment like
+    // "--output=/x" would be parsed by Playwright as an option.
+    if (hasOptionLikeSegment(relativeToRoot(root, resolved))) {
+        throw new PlaywrightMcpError(`Test path "${file}" has a segment starting with "-"`, 'INVALID_PATH', {
+            hint: 'Rename the file or folder so no path segment starts with "-".',
+        });
+    }
     return resolved;
 }
 /** Best-effort `retries: N` from the config source text. */
@@ -383,13 +485,18 @@ export async function runTests(options) {
         args.push('--trace=retain-on-failure');
     for (const extra of options.extraArgs ?? [])
         args.push(sanitizeCliArg(extra));
+    // The JSON reporter must be the only reporter and come last: results are
+    // parsed from its output. sanitizeCliArg rejects --reporter; this keeps
+    // the invariant if that ever changes.
+    if (args.some((arg) => arg.startsWith('--reporter'))) {
+        throw new PlaywrightMcpError('Caller arguments may not set --reporter', 'INVALID_PATH');
+    }
     args.push('--reporter=json');
-    const env = {
-        ...process.env,
+    const env = childEnv({
         PLAYWRIGHT_JSON_OUTPUT_NAME: reportPath,
         FORCE_COLOR: '0',
         PW_TEST_HTML_REPORT_OPEN: 'never',
-    };
+    });
     const timeoutMs = clampInt(options.timeoutMs, 1_000, 3_600_000) ?? DEFAULT_RUN_TIMEOUT_MS;
     const startedAt = Date.now();
     logger.debug('Starting Playwright run', { args: args.join(' '), cwd: root, timeoutMs });
@@ -425,7 +532,9 @@ export async function runTests(options) {
         hint =
             outcome.spawnError.code === 'ENOENT'
                 ? 'Node.js could not be located on PATH. Reinstall Node >= 18 and retry.'
-                : `Failed to start Playwright: ${outcome.spawnError.message}`;
+                : outcome.spawnError.code === 'EBUSY'
+                    ? 'The server is at its limit of concurrent runs; retry when one finishes.'
+                    : `Failed to start Playwright: ${outcome.spawnError.message}`;
     }
     else if (outcome.aborted) {
         errorKind = 'CLIENT_DISCONNECT';
@@ -486,17 +595,23 @@ async function runPlaywrightList(cli, options, configPath) {
     if (configPath)
         args.push('--config', toNativePath(configPath));
     args.push('--reporter=json');
-    const env = {
-        ...process.env,
+    const env = childEnv({
         PLAYWRIGHT_JSON_OUTPUT_NAME: listReportPath,
         FORCE_COLOR: '0',
-    };
+    });
     const outcome = await runProcess(process.execPath, [cli, ...args], {
         cwd: root,
         env,
         timeoutMs: DEFAULT_LIST_TIMEOUT_MS,
         signal: options.signal,
     });
+    if (outcome.spawnError) {
+        throw new PlaywrightMcpError(outcome.spawnError.message, 'SPAWN_FAILED', {
+            hint: outcome.spawnError.code === 'EBUSY'
+                ? 'The server is at its limit of concurrent runs; retry when one finishes.'
+                : 'Could not start Playwright.',
+        });
+    }
     const raw = (await readFileText(listReportPath)) ?? extractJsonFromText(outcome.stdout) ?? undefined;
     if (raw === undefined) {
         const diagnosis = diagnoseOutput(outcome.stderr || outcome.stdout);
@@ -525,8 +640,11 @@ export async function listTests(options) {
             throw new PlaywrightMcpError(`Config file not found: ${configPath}`, 'NO_CONFIG');
         }
     }
-    const cli = await resolvePlaywrightCli(root);
-    if (cli === null) {
+    const cli = options.noSpawn ? null : await resolvePlaywrightCli(root);
+    if (options.noSpawn) {
+        // Source scan only (restricted callers); not an error.
+    }
+    else if (cli === null) {
         const detection = await detectProject(root);
         const { message, hint } = missingPlaywrightMessage(detection);
         error = { kind: 'NO_PLAYWRIGHT', message, hint };
@@ -571,24 +689,4 @@ export async function listTests(options) {
         error,
     };
 }
-/**
- * Quick reachability check for the app under test, used to tell the
- * user "start your dev server" instead of surfacing ECONNREFUSED.
- */
-export async function probeServer(url, timeoutMs = 2_000) {
-    try {
-        const response = await fetch(url, {
-            method: 'GET',
-            redirect: 'follow',
-            signal: AbortSignal.timeout(timeoutMs),
-        });
-        return { reachable: true, status: response.status };
-    }
-    catch (err) {
-        return {
-            reachable: false,
-            error: err instanceof Error ? err.message : String(err),
-        };
-    }
-}
 //# sourceMappingURL=playwright-runner.js.map